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This is the WUN newsletter from March 1995, which was a N&O special. 
This special handles the Russian intelligence and diplo network that we 
first called ‘the Brotherhood' and later 'SOUD', and which is now better 
known as 'FAPSI'. Many updates followed, the most relevant updates can 
be found at the end of this article. A fully updated version of the 
FAPSI monitoring results was published in the WUN newsletter #9706. 
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Hello WUNners, in this extra edition of the WUN Newsletter, I'd like to 
introduce you to the 'Brotherhood', a Russian related diplo network that 
fits in both the 'Digital Review' and ‘Numbers & Oddities’ columns. 


Chapter 1: The story so far (1979 - 1995) 

Chapter 2: Examples of chatter, preambles and messages 
Chapter 3: List of link-id's and Callsigns 

Chapter 4: Frequency lists 


(=- a huge THANK YOU goes to my fellow Brotherhood-monitors -=) 
(-= Leif Dehio, Dave Batcho, Paul Scalzo and Don Schimmel -=) 
(-= and to those who sent logs, comments & suggestions -=) 
(=- Thanks for the input and your time guys -=) 


>>>>>>>>>>>>>>>>>>>>> Chapter 1: The story so far <<<<<<<<<<<<<<<<<c<<<<<<<< 


The first encounters in the USA with the 'Brotherhood' stations were in 
the late 70's when they still used high speed CW (ca 32 WPM). Most of the 
early CW stations (PSN, BPA, SPK, WNY, YBU) are still active today. 'ROL' 
however disappeared completely. In the mid 80's the RTTY transmissions 
started. The speed used was 50bd. Messages to YBU were the most common 
ones in those days. Also messages to PSN were monitored. The callup was 
slightly different from the system that is used nowadays: 


VVV PSN PSN PSN 2/245 VVV PSN PSN 2/245 
NW NW 

NR 271 GR 135 

+ 5L or 5F groups 


Then sometime in the mid-1980's they changed to the 5 group preamble they use 
now. But the original link designators were different then. 


Callsign / Link-id 


YBU 07386 
SPK 06446 
PSN 03861 
KAC 00172 
JMS 00484 
GMN 05418 
BPA 06373 
WNY 01428 


Traffic has always been the same group of cypher systems including the 
substitution group at the end. 


By the late 1980's they were being reported in most of the UTE publications. 
Don Schimmel reported them in one of the earliest issues of Monitoring Times 
as UNID and Bob Margolis reported them in PoPComm. 


The NDO link has always been a strange one. Not much activity. Only one sked 

a week (on Wednesdays) and even that is not granted. The WFO / MIG link is 

the only known 2-way link in the Americas. Although it still operates some- 
what clandestinely - minimum amt of chatter, etc. The station sending WFO is 
definitley the Cuban end (by propagation and bearings). The other end has been 
pin pointed in the New York City area, probably the Russian UN delegacy. 


In the late 80's an European network of RTTY stations popped up, similar 
to a network that was active in the America's. Both networks are still very 
active today. 


The master station in Europe was 'RCF'. Several frequency guides listed RCF 
as Ministry for Foreign Affairs in Moscow. After the disintegration of the 
USSR, the 'RCF' callsign disappeared. The new master station is as powerful 
as RCF was and one thing is for sure: this station is located in or very 
near Moscow as well. The station was DFed various times and every time Moscow 
appeared to be the source of the signal. It is very likely that RCF is still 
alive and kicking, but doesn't use its old callsign anymore. 

Whether the master station or RCF really is / was MFA Moscow will probably 
remain a mystery. There are many other suggestions though varying from a 
shipping network to possible connections with TASS, KGB or GRU. 

I stick to the theory that this is a diplo network. Whenever something hot 
is happening, like the Chechenya actions, the stations of the Brotherhood 
are making overtime, even on Sundays, while there are normally no transmis- 
sions on Sundays. The only station that is often heard on Sundays is BFR, 
which may indicate that it is possibly located in an Islamic country. 


The master station transmits crypted messages (5-letter or 5-figure groups) 
to the other stations. There are fixed schedules for a couple of stations 
while others are reported less frequently. During the time that RCF was still 
in place they didn't need to have fixed skeds, as the traffic list system was 
being used. Now that this system is no longer in use, each link has one or 
two fixed skeds on an assigned frequency pair. This system is probably much 
safer, as the sender knows that the recipient received the message correctly. 
The auto-broadcasts to a.o. KUL, VKX, RAU and RKD are probably just circulars 
or routine traffic sent to the specific networks (transmitted blind and 
therefore repeated throughout the day on a larger number of frequencies). 

It appears that almost all the callsigns that were on RCF's traffic list are 
still there. 


So far we have found the following fixed two-way schedules for Europe: 


- 08:25-08:30 ??? to DKR 


- 08:35 22? to RIA 

- 08:45 WQL to VNB and vice versa 
- 09:10 2??? to UXW 

- 09:25 2??? to JUA 

- 10:05-10:10 ??? to CAZ 

- 11:15 KKK to KUA 

- 13:20 22? to DKR 

- 14:30 RGA to BFR and vice versa 
- 14:50 2??? to RPO 

- 16:35 22? to UDZ 21 

- 16:50 2??? to JUA 


The callups and messages can be divided into two groups: the most common for 
the America's and Europe goes as follows: ''4646464646464646 KUL KUL KUL KUL 
1/226''. Note that 46's are transmitted instead of RY's, then the callsign 
of the recipient and the number of messages / number of 5-letter or 5-figure 
groups in this message. 

The other one is yet only noted in Europe. The transmissions start with a 
selcal of 6-tones (the system is called Mazielka), followed by the callsign 
of the recipient sent in CW, then into RTTY where the preamble is handkeyed 
while the other system has an automated preamble. The Mazielka callup is 
fairly new, it has been reported since mid 1994. 

The Mazielka is a selcal system that is used by the master station to wake 
up a station outside the normal fixed sked. It is only used to catch the 
operators attention, not to start the equipment remotely (just like the 
selcal used in aircraft). The fact that they switch to CW after the Mazielka 
is a sure sign that the operator has to prepare the equipment before they 
can start the transmission. The use of non-error correcting RTTY systems 
makes it practically impossible to establish a link automatically. The 
Mazielka has never been heard during the normal schedule times, so probably 
the Mazielka is used when there are very urgent messages that cannot wait 
‘till the regular schedule time. It seems that there are specific channels 
for rush traffic as well. 


I think that a couple of the callsigns are not in use by only one station, 
but that KUL, VKX, RAU and RKD are in fact the callsigns of networks. This 
could mean that the automated transmissions to KUL etc include messages for 
all stations in such a network. This does not necessarily mean that there is 
only one callsign for every station in a network. As far as we know every 
station has a callsign of its own. However, the master station seems to use 
more than one callsign. VNB, KKK and RGA, which are believed to be trans- 
mitting from the same location are most probably callsigns of the master 
station. It seems that the master receives a different callsign on each 
specific two-way link. 


What did we find so far ? 

We have found several clues about the preambles and QSL system. Let's take 
a closer look at the preambles. Each message starts with a preamble con- 
sisting of 5 groups, followed by the message itself. A typical preamble 
looks like this: 11177 00142 23687 05012 01109. 


1st group: probably a message identifier, stating what kinda message it is, 
maybe also a priority code. 11144, 11166, 11177 and 11199 are the 
combinations heard so far. The most common are 11177 and 11199. 
The latter is being used for QSL purposes. 


2nd group: the link-identifier, each link has its own id, except for stations 
who have a two-way link, in that case both stations have the same 
link-id. 


3rd group: the crypto-factor. 


4th group: the first two digits are the date and the last three are the 
message number. 


5th group: the first four digits represent the number of groups in the 
message + 1. The extra group is most likely the crypto-factor 
(3rd group of the preamble). The last digit is either a '1' 
ora '9'. 


After the messages have been sent, the operators sometimes have a little chat. 
In the America's the conversations are in often poor English while on the 
European side often cyrillic is used and also German words are used. 


As I mentioned earlier, there are also QSL messages. The original messages 
can be transmitted on other frequencies and even on other days then the day 
the QSL messages gets out. The first group of the preamble is always 11199. 
The messages always seem to start with 55555 followed by 77011, while the 
last groups represent the QSLed messages. A typical QSL preamble and 
message looks like this: 


11199 00142 00000 18010 00069 
55555 77011 00089 00090 00091 


Five different cipher systems have been noted: 


1) The 3rd group of the preamble is 00000 and the message consists of 5L 
groups. 

2) The 3rd group of the preamble consists of random digits and the message 
consists of 5L groups. 

3) The 3rd group of the peramble consists of random digits and the message 


consists of 5F groups and the last group is NOT 11111. 

4) The 3rd group of the preamble is 00000 and the message consists of 5F 
groups and the last group is 11111. 

5) The 3rd group of the preamble is 00000 and the message consists of 5F 
groups and the last group is NOT 11111. 


The Brotherhood uses various RTTY modes, the most common is Baudot 75bd. 
Sometimes 50 or 100bd is used. They also use a Russian version of Piccolo, 
better know as Crowd36 or CIS Piccolo, Other, yet unknown, exotic modes are 
used as well. Then there is ofcourse the Mazielka and CW is used as well, 
mostly for chatting and callups. 


Who are the partners in this Brotherhood ? Well, it's all guesses ofcourse. 
No-one steps forward and says ‘he you guys, it's me you're looking for' :-) 
According to DF-research, the European master station must be located in 
the Moscow region, while the WFO / MIG link is a link between Cuba and 

the New York area, probably the Russian UN legation. Station GMN could be 
located in Mexico City. 


In ‘Soviet Signals Intelligence' by professor Desmond Ball, he listed Soviet 
Sigint Posts located in the Western Hemisphere. The sigint posts are in 
Mexico City, Washington 2x, New York City, San Francisco, Managua, San Jose, 
Buenos Aires, Montreal, Ottawa, Chicago and Lima. 

So far, 13 transmission schedules have been noted for the Brotherhood in the 
America's. There are 12 listed sigint posts and 13 schedules, so if there is 
a connection between the schedules and the sigint posts, then there must be 
at least one more sigint post. 

The European scene is a bit different; we have not yet determined where the 
out-stations are located. Most probably outside Russia and in the eastern 
part of the country. 


Then there are the QSF messages: 1/1, 2/1, 3/1, 7/1, 8/1, 9/1 QSF3 

The official meaning of the QSF-code is ''I have effected rescue and am 
proceeding to base''. We can safely assume that the Brotherhood-QSF's have 
nothing to do with the official meaning of the code. Intensive monitoring of 
the stations revealed that QSF2 means a normal schedule, QSF4 means no 
schedule and QSF3 is yet unknown but could mean that an alternative schedule 
will be used. On the days that QSF1 had been indicated a QRU was sent. 


There is a very significant feature to the 5-letter traffic. The last group of 

every message is a simple substitution which indicates the date the message was 
composed and the group count which is always 3 less than the group count shown 

in the preamble. The substitution is: 


0 I U Z T R E W A P 
0 1 2 3 4 5 6 7 8 9 


For example: 


11177 00148 57477 26811 00609 
QKANG XOBJZ ..........-..--22008- VEVXX UEORW 


The last group translates to 26057 -- 26th of the month, 57 groups. 


ETFNJX TKAGAS 

On the American network the sequence 'ETFNJX TKAGAS' is frequently heard. 
It is always transmitted in sloppy FSK Morse for a couple of minutes and 
then the transmission stops or continues in RTTY. Because the sloppy way 
in which this message is keyed, it most probably should read 'E/NJX TKAGAS' 
but also E/NIJX QAG AS is possible. 

The station simply comes up without any callsign and begins broadcasting 
ETNJX TKAGAS over and over for a period of ca 10 minutes. On most occasions, 
approximately 30 minutes later, one of the regular stations comes up and 
sends normal traffic but out of the fixed schedule for that station. The 
'ET' messages have never been observed on the regular daily scheduled 
frequencies. They are transmitted on the same frequencies as the QWk 
messages that are also on the air for the last 15 years. The QWK messages 
are are sent several times a year on one of the regular schedules along 
with the regular traffic. For example, on Dec. 3, 1994, the following was 
at the beginning of BPA's regular schedule: 


QWK QDG FM 5/12 TO NEXT QWK 
FM 00.00 TO 13.00 QSW 10698/7684/13532 
FM 13.00 TO 24.00 OQSW 16224/13532/19612 


Also on Dec. 3, 1995 the following was sent at the end of SPK's regular 
traffic: 


QWK QDG FM 5/12 TO NEXT QWK 
FM 00.00 TO 12.00 OQSW 10183/7418/13227 
FM 12.00 TO 24.00 QSW 19808/16144/13227 


ET messages have been heard on every one of the daytime frequencies listed 
in the messages above. And these messages on these frequencies are almost 
always copied on a Saturday or a Sunday, but occasionally during the week 
as recently as March 22, 1995. The QWK message then seems to say "During 
the times indicated I will use the following as _standby_ or _alert_ 
frequencies." Until February 1995, there were no reports of such a string 
on the European network. 

Recently a sequence, very much like the American one, was heard and it was 
keyed in the same sloppy way. The sequence was slightly different from the 
American one. This one reads 'E/NJX TKAZAS'. The string was recorded and 
played back for -I guess- a million times by several monitors and fed into 


a couple of decoders. Although it was a tough one to write down, we are 100% 
certain that the string is correctly decoded. 


Bloopers 

A couple of years ago, right at the moment that the WFO callup should 

find place, a numbers tape came up. After a moment it was terminated and 
replaced by the WFO callup tape. On another occasion the WNY callup tape 
was replaced by a PSN tape. After a few repetitions of the '464646 PSN PSN' 
lines, the correct WNY callup tape was transmitted. This proves the theory 
that also the American network has a master station. 


CW powerhouses 

Although it is just an uneducated guess, I believe that the CW powerhouses 
that can be heard on numberous frequencies, belong to the same organisation 
as the RTTY network. These stations transmit 5L or 5F groups and often use 
odd Q-codes. In several occasions a CW station transmitted at the same time 
as a RTTY station and was only a couple of kHz away. The signals were equal 
in strength and they faded at exactly the same moment. 


>>>>>>>>>>>>>>> Chapter 2: Chatter, preambles and messages <<<<<<<<<<<<<<<< 


A typical preamble for a message on link 60069, followed by the message 

which consists of 52 5-letter groups. As you can see the 5th group of the 
preamble states that there are 53 groups in this message. That is because 
the last group of the preamble is actually the first group of the message. 


11177 60069 00000 03118 00531 


cwzky fypxz pldyn nwpmd wvihe rfirgy embqy jecdc xixrws omfrg 
ucxxs aeosi pxdfx jtrru ofrva ltlrt vbyzj khgyn dglts rzykr 
bqhwy csffq iekmd jwytt ziydz bvzxm fjrkh lyrgv bbqcg tbctn 
gdhte ydpfc bzvns xoyvd dpnuv kbosy mzuvt dpyim krmmx fvpdb 
iwoyd dphyt sooct zftsu ggmcm dmjcg bclqx jpytn zfiwfg shouq 
ppnnj ozoro 


Another example of a message on link 60069, this time 5-figure groups 
were transmitted. Note the '11111' group at the end. 


72747 28417 50560 87313 85526 80632 52837 50418 16664 76399 
58123 43603 78923 58766 15986 49421 34805 14025 78515 74440 
10019 97789 56541 79041 11698 86832 14191 66922 89474 81657 
03900 16223 95063 13477 97728 66255 27427 67767 02743 82849 
62606 51086 23986 16123 01422 90158 89227 62126 17243 66305 
59757 46873 80493 88263 19018 04742 82333 33503 09448 02138 
89435 56354 28856 81866 33796 86485 95644 22140 76885 88093 
97982 90453 89866 09536 50411 01278 85726 65630 60100 73744 
54969 37039 63648 58444 09316 69664 02392 17253 17128 70258 
49641 99702 69467 93542 62986 62633 80508 93330 99101 00020 
76346 45897 67603 10154 85533 93742 80072 21270 51988 56724 
43127 29860 05485 71573 97484 90177 47836 03396 22210 41105 


The master station in Moscow sends out messages to KUL, VKX and 
several others at a fixed daily schedule. Note the '46' test slip 
instead of 'RY'. 'KUL' is the callsign of the recipient, there are 
3 messages with a total of 535 5-letter groups. (messages shortened) 


464646464646464646464646464646464646464646464646464646464646 
kul kul kul 3/535 kul kul kul 3/535 kul kul kul 3/535 
464646464646464646464646464646464646464646464646464646464646 
kul kul kul 3/535 kul kul kul 3/535 kul kul kul 3/535 
464646464646464646464646464646464646464646464646464646464646 
kul kul kul 3/535 kul kul kul 3/535 kul kul kul 3/535 


11177 00142 33972 29181 01479 

pofre xhtwl ewpxu garrv peife dfhfb sdstt bewph jxqzn uhlwo 
lukhy mavla bgwmu vvhmo tzptw ssxrx ibsho joznd grdlo nmxy£ 
qspsi exvhm hacfj kqzfc nyldc szdqv tvwpv cnotp ozapg orijf 
11177 00142 17790 29182 01459 

uodkh mtauy ssfnc czanv caecr scyiv yccpi kqqhi qvvub qursm 
uozjzZ arrir zutzn zubfy xjzpg ozydy mxgdk cgsec cerbk jvmzc 
qbozz bgssz yjjky guglv avrae yfypo avjux sxfis nihoi zsgmb 
11177 00142 04039 29183 02439 

enqkz kjoan ryvhn vuacc tvzuz fclci zfmsg pmjkw lgqpv aabag 
wqrml mdwux ptenu dwiya xsezx zeppr fomsx poclz paftk ytmyz 


yydix ujdbb xqpkj flujk hbqov temvj ngfhz wynly onbmh iqdjt 


qru qru_ sk sk 


RAU gets also messages from Moscow on the daily basis. 


4646464646464646464646464646464646464646464646464646464646464 
rau rau rau 1/50 rau rau rau 1/50 rau rau rau 1/50 
4646464646464646464646464646464646464646464646464646464646464 
rau rau rau 1/50 rau rau rau 1/50 rau rau rau 1/50 
4646464646464646464646464646464646464646464646464646464646464 
rau rau rau 1/50 rau rau rau 1/50 rau rau rau 1/50 


11177 00070 00000 02012 00509 


95511 17087 98320 83286 97066 36253 72549 37069 35360 10784 
48040 33879 71438 38539 02451 07605 78635 83245 55568 59601 
55663 91143 62376 59010 04870 71347 93615 52923 73086 69033 
61524 28127 89014 24432 41604 85779 98200 90728 49032 53639 
90008 91002 44796 05048 91058 98563 32569 45745 10160 


qru qru sk sk 


The station that started my interest in this network was RCF. 

I captured its signal for the first time in the early eighties. 
Several frequency lists listed this station as MFA Moscow. 

RCF often transmitted callup lists that are similar to the 
traffic lists that many of you may know from coastal stations. 
Note the significant difference between the callups in the above 
listed examples and the RCF broadcasts below. RCF started their 
messages with DE RCF, while the master station now only uses the 
callsign of the recipient, not their own callsign ! 


464646464646464646464646464646464646464646464646464646464646 
cq cq cq de rcf cq cq cq de rcf 

for udz21 caz rpo fru bla rkg rkm bxl uro nr 05 

for acd trp rcex81 wnk nr 06 

qoo nr 05 gr 189 nr 06 gr 219 
464646464646464646464646464646464646464646464646464646464646 
cq cq cq de rcf cq cq cq de rcf 

for jua rxx fqx udz21 caz rpo fru bla rkg rkm bxl uro nr 05 


for acd trp rcex81 wnk nr 06 
qoo nr 05 gr 189 nr 06 gr 219 


ryryryryryryryryryryryryryryry 

cq cq cq de rcf cq cq cq de rcf 

for jua rxx fqx udz21 caz rpo fru bla rex81 fjn rkg rkm bxl 
uro bnv ewz42 nr 36 37 all gr 1176 


464646464646464646464646464646464646464646464646464646464646 

cq cq cq de rcf cq cq cq de rcf 

for jua rxx fqx udz21 caz rpo fru bla rcex81 fjn rkg rkm bxl 
uro bnv ewz42 nr 36 37 all gr 1176 

464646464646464646464646464646464646464646464646464646464646 


464646464646444646464646464646464646464646464646464646464646 
cq cq cq de rcf cq cq cq de rcf 

for all nr 69 

for glk owr dpl obx ptf dkr wkl kua rss wql lsg nr 08/70 
for qru 

qoo nr 08/70 gr 292 nr 69 gr 1122 


464646464646464646464646464646464646464646464646464646464646 
cq cq cq de rcf cq cq cq de rcf 

for all nr 69 

for glk owr dpl~bx ptf£ dkr wkl kua rss wql lsg nr 08/70 

for qru 

qoo nr 08/70 gr 292 nr 69 gr 1122 


Broadcasts to VKX can be heard very easily both in Europe and 
also in the USA. 


464646464646464646464646464646464646464646464646464646464646 
vkx vkx vkx 1/476 vkx vkx vkx 1/476 vkx vkx vkx 1/476 
464646464646464646464646464646464646464646464646464646464646 
vkx vkx vkx 1/476 vkx vkx vkx 1/476 vkx vkx vkx 1/476 


11177 00166 72959 31124 04769 


wekhe eykuw ntiut pesko hfkbc tehsv lxfvh cczzk znxjp qmweh 
ealxe tmdfn gackt tgbhp nsguf sfbay arbdr whqad hkpuq zivrl 
vipne gwgio fgcfn aajzc wzjum tcoho brbrs xdpbd pgdts utifg 


qru qru. sk_ sk 


A difference between the European and American networks is the lack of 

chatter on the American side. Here in Europe we have occasional chatter 
between the operators. In the America's this seldom happens. The words 

'TIKAS' and 'SEE' are often used, mostly when the operators have a 


‘technical’ chat. 'TIKAS' probably comes from Ticai or Tikat which means 
‘to tick' in various Slavic languages. So TIKAS probably means 'ticker' 
or 'telex operator / telex / telegram / telex machine' or whatever. The 
use of SEE in "OM AS SEE A UR PER?" indicates this translation as well 
(see below for KUA traffic). In this case it would be used as "OM wait, 
look at your perforator" 


vnzr 05 gr 314 

nx 05 gr 314 

tikas 

for ptf kua -after qky qrz 
zkuuuuuukkkkkkaeex 

tikas 


for ptf kua -after qky qrz 

qru sk qru sk 

-> TIKAS in this sense, probably refers to telegram traffic on hand 
-> for 'PTF' and 'KUA'. 

This was heard on the link 10163 on 16.008 kHz at 09:20 UTC 24/08/94 


h qju k 
ok see 
ok asm 


11177 10163 05870~,2.?kb660kk 004(9 


cfm 
64646464 
VVV 
om Ato ne nrawits qb ? 


asm qsa bd 


063 rpt 
wqxkvk ok not 23 bd ? 
mnqsp ? 
ur op 1 ? 
ok see hr all cfm pse qsp tikas pbl ili gqrz op 1 


ryryryryryryryryry 


om pse sa qsp ? 


gr ? gr? pbl gr12345? 
pse nryvr mni wrk vy qrl 
ok asm ee see 
pse qsp tikas hr all cfm 
see agn 
05870 pse k 
asm 


hw 
gmagvl qsp vy pse qsp ur k 


op 1 qrl ? 

ok vy om Ato ne tak ? 

ur new op ? 

om pse qsl my qtc tak ok ? 

op 1 all qsp after ili pse qrz after 
ok ? 

hr a wrk op 1 hr all cfm ok ? 

cfm tks qsl 1 k 


The following was heard on the KUA link. Note the last paragraph in 
which the operator asks if he may use a Russian register to continue. 
The RTTY message was sent in 'normal' shift while it is easier for 
the operator to chat in 3rd shift Cyrillic, or what he calls 'Ruskih 
registrow’. 


first CW: ''qsy 14622 qsy 14622 kua kua qsy 14622 ga'' 
then into RTTY 75bd 


RYRYRYRRYRQRYGYRYRYRYKRRYRYRYRYRYRYRYRYRYRY 
RYRYRYRRYRQRYGYRYRYRYKRRYRYRYRYRYRYRYRYRYRY 
OM HR SA AS SEE A UR PER? 

NOT FB 

PSE AGN ES’ SEE POV 

SANX POV NAU4isx lenty prawilxno delatx 
MA&ina ih ne bereit 

GA GA 


RYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYR 
11177 30022 45013 20882 00549 
KDRUG ALMIV LPTAT EACKS YBVPF LSCXG AFJII XDAHJ RQMXY JJIXFV 


HAJME EJKMA XMXLE ADMSE DSYHQ ZVAIZ ORANL PEBPI EHPGZ LTYFU 
OSBBX DBWRM EKOOB NOZVX UPPPW ZVXHC OAETV DQJBR ABQFD TCILT 


QSL 4 
QRU 
CFM TKS GB SK 


FXRYRYRYYYRYRYRYRYYRYRYRYRYYRYRYYRYRYRYYRYRYRRYRRYR 
QSP QSP QSP TX QSP X ZLD ZLD 
11177 30022 48526 20886 03859 


MIPYE KVMGG AOCHW RDJLJ FCMOO UORGV CFKYE PVSLM YMOMY CYBUU 
ZYTNE RTPRB QMBUA GKAUP GEMLK HPCVN ZPQYS ODTWT OXUTC UWFWC 
SINUB RYXCV RDJWC VUNLX CMCMW VHUUK ZFHAJ NYZJO GBIST PXQMA 


QRU QSL 4 ALL FM OM PSE DAWWAJ MEDU TXT ES PL PBL 
OKOLO 15 RUSKIH REGISTROW OK ? TQVELO RABOTATX INA 4E OV?? 
TKS GB SK SK 


Here again a message from the master station to VKX. Note the test 
schedule at the end. 


464646464646464646464646464646464646464646464646464646464646 
vkx vkx vkx 1/476 vkx vkx vkx 1/476 vkx vkx vkx 1/476 


11177 00166 72959 31124 04769 5-letter-groups 


fm 12.05 test qrg 12124 
fm 12.05 test qrg 12124 


qru qru sk sk 


Q-codes are frequently used. This is an unusual long chatter including 
a transmission schedule. 


OM QRU PSE QBN QBNVVVVVVOM PSE QOZ 
RYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYRYYRYRYRYRYRYRCSYRYRYRYRYRY OK OK 
OK OM HR QRZ WM FM 

QSA QTR ? 4646QQSA NOT NOT QSA NOT OK OK OK OK 

HR ALL OK PSE AS M OM OM HR SEE QUW ONLI QSW 

14622 M OM HR SEE UR WRK QK 

GP11YWwW QSA 0 

OM ALL OK WILL QSPALL OK WILL QSP PSE AS 3 ALL OK OK AS 

SEE S WILL QSP ES SA ALL QRG QUW PSE AS SEE WL 


464646464646464646464646464646464646 
04-06 QRG 13466 11134 80043 15683 
06-14 QRG 18587 18617 17488 21860 


14 -18 QRG 16337 12188 11028 17488 
18-04 QRG 8815 7376 6884 11068 


OM OM PSE LNT ONLI QSY HR UR QRG SA FM KY 1 OK ? AS M 

OM OM AFTER PSE LNT ONLI QSY OK ? HR SA UR QRG FM KY 1 AS M M OM OM PSE 
TEST QRZ QSU OM OM HR SEE PSE SEE HR WRK QAZNOT NOT OM OM PSE TEST 

QSR 

OM OM PEREWERN I LNT NA TT  WYZOWOM IDET ZADOM NAPERED OM OM 

BK BK BK BK BK BK BK OM OM ALL FB FB FB OM OM PSE  TESR 

QRZ QSR QRG 14929 OM PSE TES QSR QRG 14929 OK ? HR SEE SEE OM OM 
PSE QSP NOMER KORRESPOND UR WRK NR 21 21 21 646464646464 64640K OK OK 
OM OM HR’ TEST QSR WRK BD OM OM PSE QSP NR KORRESR OM OM HR WRK NR 21 

SINH SINHRON NR 21 

OM OM QRZ QUW WRK FB O OK OK OM OM HR WILL QTC PSE AS SE OM OM PSE 
QOZ HR WILL SA OP 1 OM OM AI TO U TEBQ NE RABOTAET W QSU 
6464646464646464640M OM PSE QBN QBN 646464646464646464646464646464646 
46461IM OM PSE QBN QSA NOT QSA NOOT PSE QBN HMFB FB FB FB OM OM SEE HR 
WILLQRZ OK OK OM OM HR WILL QRZ QSU OM UR WILL QRZ QUW LNT OK ? OM OM 
HR QTC NOT QRQ WILL QSO F CFM CFM OM QTC NOT QRQ OM OM QTC W QSO OK QSL 
? QSL ? F CFM CFM TKS GB SK SK PSK URR ALL FB’ GB_ GB SK SK PKS 


The QSF codes: 


The 'RAU' transmission at 14:10 UTC contained the following 
(msg was repeated on 12180 kcs, shortly thereafter): 


46464646464646464646464646464646464646464646464646464646464 
rau rau rau qsf rau rau rau qsf rau rau rau qsf 
12/12 wrk qsf 4 

12/12 wrk qsf 4 

qru qru_ sk sk 


The 'KUL' broadcast on 10584 consisted of the following. Interesting is 
the fact that the 'KUL' transmission on 10584 had one more message than 
the previous transmission on 12193 kHz. Looks like they got one more 
message in, during their transmission. 


646464646464646464646464646464646464646464646464646464646464646 
kul kul kul 2/845 kul kul kul 2/845 kul kul kul 2/845 


12/12 wrk qsf 4 
12/12 wrk qsf 4 


11177 00142 00000 09749 07201 


all gqtc 3/1013 


all gqtc 3/1013 
12/12 wrk qsf 4 
12/12 wrk qsf 4 


qru qru_ sk sk 


YBU sent this right after his callup and before any other traffic 
was sent: 


QWK QDG FM 1/11 TO NEXT QWkK: 


FM 00.00 TO 04.00 QSY 11212/10135/ 8147 QSW 10243/ 8108/ 5837 
FM 04.00 TO 11.00 QSY 8225/ 7610/ 6308 QSW 6845/ 5877/ 5258 
FM 11.00 TO 14.00 QSY 6645/12530/17325 QSW 5797/11406/16308 
FM 14.00 TO 21.00 QSY 16830/18290/19580 QSW 15682/17490/18839 
FM 21.00 TO 24.00 QSY 18876/14814/11180 QSW 17490/13627/10294 


Then he sent "AGN AGN" and repeated it. Later that same day, station WNY 
(on high-speed CW - 34 WPM) sent this: 


VVV VVV WNY WNY WNY 
NW NW 


QWK QDG FM 1/11 TO NEXT QWK 

FM 0000 TO 0300 OSW 8144/6881/5745 
FM @300 TO 1200 QSW 8144/6881/9246 
FM 1200 TO 2400 QSW 10131/15559/8158 


RPT AGN RPT AGN 


((repeats entire msg)) 


Traffic sent to ‘JMS' contained this before the regular traffic: 
Febuary 03, 1995 22.30 UTC 16842.5 kHz 


ILC QDG FM 4/2 TO QWK 

FM 00.00 TO 13.00 QWS 10713/8118/13541 
FM 13.00 TO 24.00 QWS 18053/16491/13541 
QWK QDG FM 4/2 TO NEXT QWK 

FM Q0.00 TO 13.00 QSW 10713/8118/13541 
FM 13.00 TO 24.00 QSW 18053/16491/13541 


To show you the similarity in traffic on both the European and the North 


American sides, I quote a piece of a transmission from Moscow to -I guess- 
DKR: 


GXWHQ UJBAZ FZLCV WNEGK JZAHF MWZIJ WNEZO QQKLN WKTUS YUSJZ 
HIOUK JBUPV SKLBI JVTCW KPZJW UTUUT 


OM PSE SEE TIKAS 
HR RPT AGN 


04.00-06.00 

QRG 1 18565/16058/15683/13466/12158/11028/10328/8487 /8178/7537 
QRG 2 14578/11536/11134/8043/7867/7376/6888/5414/5858/5021 
06.00-14.00 

QRG 1 23170/22825/21860/18587 /20071/18234/15683/14578/16337/12158 
QRG 2 18234/18573/18617/17488/18364/13466/11028/10218/8877/7833 
14.00-18.00 

QRG 1 12131/15733/17488/16337/18617 /16184/18308/14486/16058/11614 
QRG 2 7814/10315/12188/11028/12188/11536/12131/8203/8843/5478 
18.00-04.00 

QRG 1 10512/10218/11068/8815/10707/8826/8487 /7608/7885/5858 

QRG 2 6885/6888/7376/6884/6885/6888/5836/5015/5771/4526 


OK ? 

WRK FM 01 11 80 KWK QUW TO NEXT QWK 
ALL OK? 

PSE ALL QSP TIKAS 

NIL 

PSE QSL 

CFM 


QSL messages which always bear a 11199 as the first group in the 
preamble, and begin with 55555. Recently a startling message was 
sent by YBU. It seems to be the first unenciphered code ever seen 
on the Brotherhood. Here is the entire message: 


11199 00148 00000 20269 01759 


55555 77011 99641 99749 99736 99719 99726 99667 99635 99749 
99736 99710 99750 99736 99751 99762 99640 99607 99749 99736 
99748 99749 99736 44326 99736 99612 99721 99736 99705 99736 
99678 99736 99688 99744 99641 99744 99641 99635 99696 99696 
99641 99655 44326 99736 99607 99704 99737 99688 99744 99641 
99744 99750 99750 99696 99641 99768 99655 44326 99736 99704 
99664 99751 99688 99744 99641 99744 99750 99750 99696 99750 


99635 99655 44326 99607 99751 99698 99737 99639 99744 99750 
99721 99688 99721 99641 99750 99744 99750 99641 99636 99744 
99736 99711 99649 99736 99635 99696 99736 99656 99736 99635 
99641 99736 99749 99750 99749 99736 99719 99756 99740 99736 
99687 99736 99612 99721 99736 99705 99736 99678 99749 99677 
99736 99612 99736 99649 99635 99696 99736 99683 99696 99696 
99639 99696 99750 99681 99736 99656 99736 99765 99635 99639 
99765 99721 99681 99655 99736 99612 99736 99649 99635 99641 
99683 99750 99768 99639 99750 99636 99681 99749 99765 99749 
99736 99724 99742 99736 99725 99640 99647 99751 99676 99775 
99747 99601 99747 99749 


Analysis shows that starting at the third group, this message 
uses a trinomial (3-digit) code. When sent as 5F groups, the 
first two digits of each 5F group are nulls. All of the code 
groups begin with either a 6 or a 7 except for the one group 
(repeated three times in the message) which uses 44 as the nulls. 


What do you think of this chatter by NDO's operator: 
"SULTAN BORN DOTHER (3500/54)" good example of bad English; I 


assume the 3500/54 is the weight and length in metric of the new 
born daughter. 


>>>>>>>>>>>>>>>>>> Chapter 3: Link-id's and Callsigns <<<<<<<<<<<<<<<<<<<<<< 


Brotherhood link-id's and callsigns. The 'x' marks stations that also 
appeared on the RCF traffic lists. 


Link Callsign Remarks RCF 


EWZ 42 


a 
= 
+t + FF FF FF FH FF 


00030 
00030 
00052 
00070 
00098 
00099 
00116 
00117 
00119 
00125 
00125 
00126 
00127 
00128 
00135 
00139 
00142 
00148 
00149 
00156 
00162 
00166 
00168 
00177 
00178 
00208 
10042 


PTF 
RCX 
RKG 
RKM 
RSS 
RXX 
TRP 
URO 
WKL 
OTD 
SCJ 
CMU 
DMA 
RQO 
RZJ 
RMM 
EWZ 
UDZ 
UXG 
KDN 
ROL 
BFR 
RGA 
NOX 
RAU 
VTX 
RSZ 
BPA 
HZW 
GMN 
MIG 
WFO 
PSN 
IMS 
KAC 
BAR 
WNY 
KUL 
YBU 
DZR 
NDO 


VKX 
SPK 


KRN 
RKD 


81 


40 
27 


(2 


(2 
(2 


way 
way 


way 
way 


contact 
contact 


contact 
contact 


with RGA) 
with BFR) 


with WFO) 
with MIG) 


+t + + + + FF FF FH FF FF HH FH OF 


10075 


10163 

20054 UDZ 21 (2 way contact with ???) x 
20054 (2 way contact with UDZ 21) 
30022 KUA (2 way contact with KkKk) x 
30022 KKK (2 way contact with KUA) 

30044 

30088 

40034 UXW (2 way contact with ???) 

40034 (2 way contact with UXW) 

50002 CAZ (2 way contact with ???) x 
50022 (2 way contact with CAZ) 

50035 JUA (2 way contact with ???) * 
50035 (2 way contact with JUA) 

50079 

60003 

60047 

60069 

70060 DKR (2 way contact with ???) x 
70060 (2 way contact with DKR) 

80031 

80038 RPO (2 way contact with ???) * 
80038 (2 way contact with RPO) 

80061 VNB (2 way contact with WQL) 

80061 WQL (2 way contact with VNB) * 
90051 RJA (2 way contact with ???) 

90051 (2 way contact with RJA) 


>>>>>>>>>>>>>>>>>>>>>>>> Chapter 4: Frequency lists <<<<<<<<<<<<<<<<<<<<<<< 


Brotherhood frequencies, Europe Last update: 29-3-1995 


* indicates inactive channel 


FREQUENCY Link-ID TIME RTTYMODE 

4873,00 <0Q0142> 18,50 F1B-75 to 'KUL' /after 6798 transm. 
4880,00 <00142> 18,52 F1B-75 to 'KUL'x* 

6798,00 <00142> 19,15 F1B-75 to 'KUL' 

7525,00 <00149> 16,25 F1B-100 '???' to 'DZR' 

7692,00 <?????> 16,35 F1B-75 

8084,00 <00030> 14,47 F1B-75 'BFR' to 'RGA' QSX 10767 
8165,00 <00142> 7,27 F1B-75 to 'KUL' 

10125,00 <?????> 13,50 F1B-75 

10183,00 <00166> 10,36 F1B-75 to 'VKX'x 


10202,00 <?????> 9,25 F1B-75 


10218 , 00 
10244 , 00 
10260, 00 
10410 , 00 
10426 , 00 
10453 ,00 
10482 , 00 
10485 , 00 
10584, 00 
10586 ,00 
10672 ,00 
10735,00 
10744 ,00 
10760 , 00 
10762 ,00 
10767 , 00 
10915, 00 
11132 ,00 
11412 ,00 
11413 , 00 
11421 ,00 
11433 , 00 
11434 ,00 
11436 ,00 
11440 , 00 
11468 , 00 
11477 ,00 
11487 , 00 
11507 , 00 
11541 , 00 


12124 ,00 
12130, 00 
12132 ,00 
12134,00 
12137 ,00 
12144 ,00 


12146 , 00 
12151, 00 
12152 ,00 
12152 ,00 
12157 , 00 


12174,00 
12180 , 00 
12180 , 00 
12193 ,00 


<50035> 
<50035> 
<00142> 
<70060> 
<90051> 
<80061> 
<00142> 
<00142> 
<00149> 
<90051> 
<00052> 
<10075> 
<00030> 
<00030> 
<80038> 
<00166> 
<60069> 
<60069> 
<00149> 
<30022> 
<10042> 
<00149> 
<30022> 
<00149> 
<30044> 
<80038> 
<50035> 


<00166> 
<00098> 
<00149> 
<00098> 
<00162> 
<20054> 


<10042> 


<00052> 
<00166> 
<00070> 
<00142> 


15,57 
14,45 
16,50 

7,15 
15,06 
15,12 
18,18 

8,45 
14,19 
14,25 
16,25 
15,30 

9,15 
15,05 
14,48 
15,00 
15,05 
12,00 
16,09 
15,36 
15,27 
15,50 
18,25 
15,40 
a1, 34 
14,26 
14,40 
14,38 
15,05 
17,13 


12,05 
15,55 

9,20 
15,35 
10,10 
16,37 


11,43 
15,15 
17,17 
9,45 
9,18 


13,30 
15,12 
14,28 
14,15 


F1B-75 
F1B-100 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-100 
F1B-75 
F1B-75 
F1B-75 
F1B-200 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-100 
F1B-75 
F1B-75 
F1B-100 
F1B-75 
F1B-100 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
backup 
F1B-75 
F1B-75 
F1B-100 
F1B-75 
F1B-75 
CW 


'22??' to 'JUA' ??? 


'22??' to 'JUA' 
to 'KUL' 


'22?' to 'DKR' 

to or from 'RJA' 

'WQL' to 'VNB' QSX 13425 

to 'KUL'/after 12193 transm. 
to 'KUL' 

'22?' to 'DZR' 

'22??' to 'RJA' 

to or from 'NQX' 


"RGA' to 'BFR' 

"RGA' to 'BFR' QSX 12239 
to or from 'RPO' 

to 'VKX'x 


'22??' to 'DZR' 
'KKK' to 'KUA' 


'2??' to 'DZR' 
'KUA' to 'KKK' 
'2??' to 'DZR' 


to or from 'RPO' 

'JUA' to '???' QSX 10260 kHz 
channel only ! QSY from unknown 
to 'VKX'x 

'???' to ‘VTX' 

'???' to '‘DZR' 

'222?' to 'VTX' 


'UDZ 21' to '???' QSX 14854 


freq. 


backup channel only ! QSY from unknown freq. 


F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 


'2?2??' to 'DKR' 
'222?' to 'RAD' 


+UNID RTTY-mode F1B-200 PSEUDO#-bitstream 


F1B-75 
F1B-75 
F1B-75 
F1B-75 


'22?' to 'NQX' 

to 'VKX' after 14852 transm. 
to 'RAU' after 14980 transm. 
to 'KUL' 


12194 ,00 
12197 ,00 
12223 ,00 
12239 ,00 
12332 ,00 
13016 , 00 
13393 , 00 
13400 , 00 
13420 , 00 


13420 ,00 
13425 ,00 
13506, 00 
13507 , 00 
13520 ,00 
14427 ,00 
14577 ,00 
14587 , 00 
14605 ,00 
14608 , 00 
14622 ,00 
14622 ,00 
14625 ,00 
14630 ,00 
14632 ,00 
14640 , 00 
14736 ,00 
14820, 00 
14830 ,00 
14832 ,00 
14834 ,00 
14842 , 00 
14852 ,00 
14854 ,00 
14863 , 00 
14870 ,00 
14894 ,00 
14947 ,00 
14950, 00 
14950, 00 
14971 ,00 
14973 ,00 
14974 ,00 
14977 ,00 
14980 , 00 
14985 , 00 
15678 , 00 
15678 ,00 


<00052> 
<00142> 
<20054> 
<00030> 
<10042> 
<00125> 
<60003> 
<00030> 
<00030> 


<80061> 
<40034> 
<40034> 
<40034> 
<80038> 
<80038> 
<00166> 
<00166> 
<00166> 
<30022> 
<00099> 
<30022> 
<00142> 
<00125> 


<00166> 
<20054> 


<00070> 
<00070> 
<00070> 
<00070> 
<00070> 
<00070> 


<00052> 


9,43 
14,12 
17,30 
15,05 
14,36 
14,17 
15,56 
13,20 
13,15 


12,41 
8,53 
9,10 
9,20 

11,00 

09,27 

14,59 

14,50 

15,01 

15,00 

12,18 

10, 56 

14,28 

11,48 

12,30 

15.30 

14,18 

14,20 

15120 

16,05 

16:10 

13,44 

11,00 

16,35 

11,53 

14,33 

13,44 

10, 07 

14,30 

14.34 

14,10 

14,12 

14,12 

14,12 

14,10 

14,10 

12,44 

11,50 


F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 


to or 


from 'NQX' 


to 'KUL' 
to 'UDZ 21' ??? 


'BFR' 


'MIG' 


QSX 14412 = altern. freq./QRM 


'RGA' 


to 'RGA' QSX 10767 
to 'WFO' 


to 'BFR' QSX 12239 


6-tone/CW 'RGA' to 'BFR'/ 


RTTY on 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-100 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
6-tone 
F1B-75 
F1B-75 
6-tone 
F1B-100 
F1B-75 
F1B-75 
F1B-75 
6-tone 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 


13400 


‘VNB! 
122?! 
“eee 2. 


to or 
122?! 
122?! 


kHz QSX 12239 kHz 


to 'WQL' QSX 10485 
to 'UXW' 
to 'UXW' 


from 'UXW' 
to 'RPO' 
to 'RPO' 


to 'VKX'* 
to 'VKX'x* 
to 'VKX'* 


"KUA' 
to or 


to 'KKK' QSX 16054 
from 'RSZ' 


probably 'KUA' 


'KUA' 


to 'KKK' QSX 16054 


to 'KUL' 


'MIG' 


'BFR' 


to 'WFO' 


to 'RGA' 


to 'RKD' 


to 'VKX' 


arated 


to 'UDZ 21' 


+ CROWD 36 (14865 kHz) 


to 'RAU' 
to 'RAU' 
to 'RAU' 
to 'RAU' 
to 'RAU' 
to 'RAU' 
to 'NQX'???? 


122?! 


to 'NQX' 


15696 ,00 
15696 ,00 
15702 ,00 
15707 , 00 
15708 , 00 
15710 ,00 
15722 ,00 
15734,00 
15826 , 00 
15826 , 00 
15836 , 00 
16008 , 00 
16018 , 00 
16032 ,00 
16054,00 
16064 ,00 
16081 , 00 
16108 , 00 
16153 , 00 
16154, 00 
16155, 00 
16214 ,00 
16225 ,00 
16232 ,00 
16242 , 00 
16244 ,00 
16252 ,00 
16273 , 00 
16277 ,00 
16285 ,00 
16285 , 00 
16324 ,00 
16332 ,00 
16342 , 00 
16344 ,00 
17533 ,00 
18092 ,00 
18225, 00 
18250, 00 
18332 ,00 
18420 , 00 
18424 ,00 
18440 , 00 
18585 , 00 
18610 , 00 
18752 ,00 
18835 , 00 
20042 ,00 


<00030> 
<00030> 
<60047> 
<00030> 
<30022> 
<00030> 
<10042> 


<10163> 
<10163> 
<30088> 
<30022> 
<30022> 
<00166> 
<70060> 
<70060> 


<60003> 
<00099> 
<90051> 
<00149> 
<00098> 
<60069> 
<00177> 
<00099> 
<30022> 
<10042> 
<10042> 
<30022> 
<30088> 
<60003> 
<00166> 
<50035> 
<10042> 
<50079> 
<10042> 
<50002> 
<80038> 
<60069> 
<00030> 
<60003> 


14,50 
11,50 
10,48 
13,00 
15,30 
14,58 
11,05 
13.05 
9,30 
9,45 
12,53 
9,20 
12,33 
9,55 
10,10 
10,53 
9,33 
7,54 
8,30 
8,45 
10,05 
9,54 
16,35 
8,39 
17,00 
8,33 
11,47 
8,15 
11,15 
8,45 
8,40 
11,40 
8,55 
11,28 
11,40 
10,15 
8,42 
11,00 
9,25 
9,14 
11,30 
14,05 
11,40 
10,10 
10,35 
7,31 
14,35 
8,50 


F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
CW 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
6-tone 
F1B-100 
F1B-75 
F1B-100 
F1B-75 
F1B-200 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-75 


'RGA' 
'RGA' 
'RGA' 


'RGA' 
'KKK' 
'RGA' 


to 'BFR' ???? 
to 'BFR' 
to 'BFR' 


to 'BFR' 
to 'KUA' 
to 'BFR' 


to 'UXW' ???? 
to 'UXW' 


1222! 


"KKK! 
"KKK! 


to 'RAD' request QSY 11672/13434 


to 'KUA' 
to 'KUA' 


to 'VKX'* 


22.2" 
mob 
per arate 
v2 


to or 
122?! 


to or 
to or 


to or 
"KKK' 


"KKK! 


to 'DKR'/also 13:20 
to 'DKR' 

to 'DKR' ??? 

to 'FQX' 


from 'RSZ' 
to 'RJA' 

from 'DZR' 
from 'NXQ' 


from 'RSZ' 
to 'KUA' 


to 'KUA' 


to 'VKX'x* 


eer ares 


122?! 
to or 


'RGA' 


to 'JUA' 


to 'CAZ' 
from 'RPO' 


to 'BFR' 


20340,00 <10042> 
20690,00 <80038> 


Brotherhood frequencies, America's 


11,10 F1B-75 
11,47 F1B-75 to or from 


"RPO! 


Last update: 26-3-1995 


Messages are sent on the primary frequency and repeated right 
afterward on the secondary frequency. 


Frequencies 
Primary / secondary Link-id 


Mode 


Remarks 


F1B-75 to PSN 
F1B-75 to MIG 
F1B-75 to MIG 
F1B-75 to BPA 
F1B-75 to WFO 


19957 00126 
13382.1 00125 21.15 
13382.1 00125 14. 
14727 10424 00116 
14736 00125 
14736 00125 
16224 13532 00116 
16228 18805 00148 
16283 14236 00128 
16327 14376 00128 
16327 14376 00128 
16448 00135 
16448 00178 
16843 13627 00127 
17450 00156 
18081 16491 00127 
18081 16491 00127 
18828 00117 
19618 16138 00148 
19618 16138 00148 
19808 00168 
19808 16144 00168 
19957 00126 
20140 17480 00148 
20588 16448 00139 
20733 18128 00119 
20823 18128 00135 


21867 18846 00168 


22 


15 
15 


.35 


.15 


14.15 


21 


14. 
20. 
14. 
20. 


13. 
. 30 
22. 
16. 
16. 


17 


22. 
20. 
16. 


19. 
13. 
16. 


22 


19 


21 


.15 
16. 


00 


00 
45 
50 
45 


00 


30 
50 
20 


30 
00 
10 


35 
45 
00 


.40 
22. 
.00 
16. 
.00 
16. 


00 


45 


00 


F1B-75 
F1B-75 


F1B-75 
F1B-75 
F1B-75 
F1B-75 


F1B-50 
F1B-75 
F1B-75 
F1B-50 
F1B-75 


F1B-75 
F1B-50 
F1B-75 


F1B-75 
F1B-50 
F1B-50 


F1B-75 
F1B-75 
F1B-75 
F1B-75 
F1B-50 
F1B-50 


to 
to 


to 
to 
to 
to 


to 
to 
to 
to 
to 


to 
to 
to 


to 
to 
to 


to 
to 
to 
to 
to 
to 


WFO 
BPA 


YBU 
KAC 
KAC 
KAC 


BAR 
KRN 
JMS 
NDO 
JMS 


JMS 
HZW 
YBU 


YBU 
SPK 
SPK 


PSN 
YBU 
WNY 
GMN 
BAR 
SPK 


sometimes on Wed, 
Sat. & Sun 


<not daily> 
occasionally, esp. 
Sat & Sun 


<Wednesdays only> 
occasionally. esp. 
Wed & Thur 
occasionally 


occasionally, 
esp. Wed 
occasionally 
occasionally 
sometimes on 
Sat. & Sun. 


-0-0-0-0-0-0-0-0-0-0- 


The 'Numbers & Oddities' column a.k.a. ‘Spooks Newsletter’ comes to you 
courtesy of the Worldwide Utility News club. This newsletter may NOT be 
utilized, partly or wholly, in any other media format without the written 
permission of the editor (ary@luna.nl). Any breach of this may result in 
action under international copyright legislation. 


To become a WUN member, send e-mail to the WUN listserver at: 
majordomo@qth.net and in the BODY of the message type: "subscribe wun" 
(without the quotation marks). 


Check out the WUN web site at: http://www.wunclub.com 


-0-0-0-0-conet-0-0-0-0- 


Updates to the above article. The original updates were written between 
April 1995 and June 1996. 


The 'Brotherhood' 

Thanks for the many compliments that you sent me for the Brotherhood 
special. I hope that the story made you tune in to these stations. I 
wonder if the Brotherhood also has a network in Australia. Has anyone 

in this part of the world heard stations like this ? Does anyone know 
where the stations in Europe and America's are located ? Please, tune in 
as often as you can and let me know the results. It would be nice if we 
could unwrap this mystery. As promised there will be updates to this 
article in my columns. Here is the first update to the European frequency 
list: Callsign NQX must be NXQ. 


Frequency UTC Link Mode / remarks 

16008 kHz, 9.17, 10163, F1B-75 

12136 kHz, 15:32, 00149, F1B-100 'DZR' to "Master" backup channel 

11460 kHz, 15:32, 00149, F1B-200 !! "Master" to 'DZR' (sked 15.30) 

12174 kHz, 08.00, 00052, F1B-75 to NXQ 

Brotherhood update 

One new link has been noted in April: 

Callsign: RVV, Link-id: 20087, UTC: 14.20, Freq: 13.418 kHz. 

The transmissions to VKX on 14605 kHz are now scheduled for 16.10 UTC. 
‘'Brotherhood' update 


A new sked for KKK (to KUA) can be found on 10850 kHz at 19.04 UTC. 


In our WUN-special about the Brotherhood, I told you that it most probably 
is a diplo-related network. Just recently some new and very interesting info 
came in. It seems that it is more than just diplo-related. According to 
usually well informed sources, this network belongs to an organization 
called SOUD. 

This organization was founded in 1977 by the Communist block and is 
basically an intelligence agency, accessible by all members of the former 
and still active communist block. The job of this organization is to gather 
information on everyone and everything - including their own and foreign 
embassy personnel. They are said to be based either on the premises of the 
Russian embassies and/or in separate installations. The organization's 
central computer is located in Moscow, and queries from members, regarding 
any subject are said to be handled in less than 4 hours time. 


This theory makes sense, because it would explain: 

- the use of Baudot telegraphy as some of the members don't 
have the money to get hold of sophisticated equipment and 
with so many nations involved it is of course a question of 
standardization! 

- the almost worldwide appearance of this net 

- the question "ruskih registrow ok ?" which is rather puzzling 
if this were to be a solely Russian net (see WUN#3). 

- the use of non Russian words ("bereit", "Si") 


Ok, who are they ? Little is known of the ultra secret intelligence 
organization SOUD "Soglashenije o Sisteme Objedinennowo Utschotja Dannych 
0 protiwnike" which is Russian for "System for mutual gathering of info 
about the enemy". This organization was founded in 1977 and was meant to 
serve as an electronic information gathering association between the 
intelligence agencies of the socialist camps. The members of SOUD were the 
Soviet Union, Bulgaria, Hungary, Poland, Czechoslovakia, Mongolia, Cuba and 
ofcourse Eastern Germany. They were later joined by Vietnam. 

The immediate cause for the foundation of SOUD were the 1980 Olympics in 
Moscow. To safe guard the USSR from ‘foreign hostile forces' during the 
Olympics, the main task for SOUD was to gather as much information about 
the ‘enemy' as they possibly could and store this info as comprehensive as 
possible. Because the western countries boycotted the Olympics in Moscow, 
most of the ‘enemies' didn't show up either. Nevertheless SOUD became an 
absolute hit in spy-land. Their success was so huge that they survived the 
end of the cold war and even the collapse of the communist block. 

After the foundation in 1977, it took about 2 years before they became 
active. Besides the initiator, the KGB, no agency was as fanatical as the 
East German Stasi. SOUD still gathers information about all possible 
‘enemies’ of the alliance which are stored in the main computer in Moscow 
and queries from members, regarding any subject are said to be handled in 
less than 4 hours time. 


The SOUD databanks include names of agents, zionists, hostile religious 
organizations and organizations of emigrants, journalists, diplomats, 
cultural and commercial attach s, representatives of airlines, etc etc. 
Information found in Stasi documents reveals that in 1989 more then 11100 
names were collected. Most of them included a personal description, the 
maiden name of the mother and a sample of the handwriting. 


Brotherhood update 

A new sked for messages to RAU can be found on 13880 kHz at 08.10 UTC. 

UXW has a fixed sked at 09.10 UTC on 14426 kHz with RLX in Moscow, the 

other end of the link is on 13506 kHz. The link id for both stations 

is 40034. 

-> The 'Brotherhood'/SOUD stations RLX & UXW were extremely busy during 
the London conference on Bosnia, RLX sent monster messages to UXW for 
over an hour, so perhaps UXW is the Russian embassy in London. 

A strange header was sent from UXW to RLX on 14426 kHz 21/07/95, 
09:11 UTC: 11177 40034 68983 21587 00043. Note that the last group of 
the message does not correspond to the usual brotherhood substitution 
system. 

> SOUD update: Paul Scalzo found a new SOUD station. The new station has 

callsign “SVA'. The link identifier is yet unknown. There is a sked at 
00.00 UTC on 10422.7 kHz in 75bd Baudot towards 'SVA'. The callup was in 
sloppy CW. 

-> SOUD: Rick Baker heard on 14736 kHz a new sked at 19.45 UTC on the 
WFO / MIG link. We finally know for sure where these guys are located. 
We knew already that WFO is the Russian UN delegation in New York. Now 
we also know that MIG is in Managua, Nicaragua !!! The Managua site is 
confirmed through Dave Batcho from an official US Government source. 
We also have proof that the SOUD stations are using 10 and 40bd MFSK 
Crowd36. On 16214 kHz at 10.25 UTC selcal 'VDGB' was heard followed 
by a message to link 60015 both transmitted in 40bd. The usual operator 
chatter was in 10bd MFSK. This freq was earlier used for transmissions 
from Moscow to 'FQX', link id unknown. FQX may be the callsign for 
link 60015. Here's the header: 11177 60<015 99+865 1BB77 00199 
Other SOUD 40bd freqs are: 10327, 11051, 11073, 12179 kHz with mostly 
encrypted traffic or sent in another exotic mode while unencrypted 
stuff can be found on 12128, 13398, 14632, 14659, 14817, 14823 and 
16214 kHz. 

Guy Denham writes from the UK that he caught the WQL / VNB link at 
16.30 UTC on 5775 kHz (WQL link 80061) and on 6862 kHz he heard VNB 
although he is not 100% sure of the latter. The interesting thing 
that Guy noted is the use of the digit '3' at the end of the 5th 
group. This was sent on various occasions so a typo must be ruled 
out. Guy also copied traffic to the counterparts of RVV and DZR on 
links 00149 and 20087. Here are the skeds: 

00149 RVV / RVC47. Traffic to RVC47 heard on 8057 at 17.55 UTC 
20087 DZR / RBP71. Traffic to RBP71 heard on 9237 at 17.55 UTC 


In both cases sloppy CW callup procedures were followed by 75bd 
RTTY. 


SOUD update 

o It seems that I made two serious bloopers in WUN#12. Sorry for that. 
The first one was in the SOUD update when I told you that the end 
that sends MIG is definitely in Managua. Well, that is true but the 
other end that sends WFO is NOT the Russian legation in NY. It is the 
large Russian transmitter site just outside Havana - the same site from 
which the other (one-way broadcast) SOUD transmissions come. 

o Guy Denman from Portsmouth, UK, copied a new SOUD station on 7920 kHz 
using link-id 00074. This sked starts at ca 14.45 UTC. Guy also enclosed 
a recent sked for a bunch of the European transmissions. 


Freq UTC to link 
12193 14.10 KUL 00142 
14980 14.10 RAU 00070 
10584 14.20 KUL 00142 repeat of 12193 
12180 14.30 RAU 00070 repeat of 14980 
10767 14.30 BFR 00030 

5775 15.25 WQL 80061 working VNB on 6862 
6862 15.25 VNB 80061 

7920 14.45 ? 00074 

15735 16.10 FQX 60003 

12195 16.30 GOD 00090 

10277 16.45 ? ? 

10287 17.30 JSC 00190 

8057 17.45 RVC47 20087 

9237 17.55 RBP71 00149 (also noted at 17.30 -Ary-) 
9073 17.55 UNID 

6798 18.40 KUL 00142 


o Edgar White sends us a couple of loggings along with his best wishes 
for '96. Thanks Edgar, it is a good update to the America's sked. 


Frequency to link UTC mode/speed/shift 
16226.28 clg YBU, 00148, 14:00 BAUDOT 75/500 
18803.26 clg YBU, 00148, 14:09 BAUDOT 75/500 
14725.33 clg BPA, 00116, 15:15 BAUDOT 75/500 
10422.35 clg BPA, 00116, 15:26 BAUDOT 75/500 
21865.2 clg SPK, 00168, 16:00 BAUDOT 50/500 
18844.24 clg SPK, 00168, 16:25 BAUDOT 50/500 
20731.21 clg GMN, 00119, 16:45 BAUDOT 75/500 
18185.28 clg GMN, 00119, 16:54 BAUDOT 75/500 
16446.27 clg KRN, 00178, 17:35 BAUDOT 75/500 


14465.28 clg KRN, 00178, 17:43 BAUDOT 75/500 
16446.26 clg WNY, 00139, 19:09 BAUDOT 75/500 
16841.26 clg JMS, 00127, 22:30 BAUDOT 75/500 


o SOUD. Edgar White copied SOUD when they messed up: 
14724.5 clg BAR: SOUD link 00116 1515 Baudot 75/500 Tfc 3/210 
10422.3 clg BAR: SOUD link 00116 1524 Baudot 75/500 Tfc 3/210 
This link id, frequency and schedule is normally used for calling BPA. 
Now BAR was called instead of BPA. 
He also copied a sked for SPK (link id 00168) 
QWK QDG FM 14/01 TO NEXT QWK 
FM 00.00 TO 12.00 QSW 9144/7884/13451 
FM 12.00 TO 24.00 QSW 19827/16218/13451 


SOUD update: 
o A new link has been copied on 14473.88 kHz, SOUD Moscow, link id 90039, 
txm mode Crowd36 at 12.07 UTC. 


o Guy Denman heard on 10482 kHz at 08.45 UTC on link 80061 transmission to 
VNB. Digit '3' as last figure of last group in the header is being used 
all the time now. 

He also copied at 09.10 UTC on 17474 kHz, link 10163. This one has not 
been reported for the past 6 months. This link was active in 1994/early 
'95 but had no fixed sked. 


o Edgar White writes that he noticed an odd thing: 
11144 00139 80697 20152 00809 
ZIJAXH IQXTN HOXCQ ORDIN QEGLE XGAUE RZJSY MJMAH THLDP RYKES 
<clip clip clip> 
EDJTH LDNSR WCGOY MUSKH SKCGG YMXNC ISBBJ QYRRQ IPOWW 


11177 00139 26760 19150 00809 

ZJAXH IQXTN HOXCQ ORDIN QEGLE XGAUE RZJSY MJMAH THLDP RYKES 
<clip clip clip> 

EDJTH LDNSR WCGOY MUSKH SKCGG YMXNC ISBBJ WGQLR IPOWW 


''Message 19150 was first sent to WNY on 19 Dec., then both appeared 
together on 20 Dec. and message 20152 was re-sent on 21 Dec. Groups 1/77 
of both messages are identical, which would seem to indicate that these 
contain the real cipher text, which would agree with the encoded count 
contained in group 79. I wonder then if both group 78 and pmbl group 3 
are used to derive the cipher key ?'' 


It is possible Edgar. Except for the date and cypher group 3 nothing 
else changed, so I guess group 78 has either a connection with group 
3, the date or both. 


o Stan Scalsky noted a new sked for the txm to KAC: 2030-2100 UTC 


o SOUD update. Guy Denman sent me the current sked for the fixed links. 


UTC 

1525 
1525 
1840 
1755 
1755 
1730 
0845 
1525 
1420 
1425 
1410 
0710 
0910 
0845 
1340 
1410 
1730 
1410 
0930 
0930 
1420 
1410 


callsign to 


20087 
20087 
00190 
80061 
80061 
00142 
00030 
00142 
00070 
40034 
80061 
20087 
00070 
60003 
00098 
50079 
40078 
60003 
10024 


in contact with 
VNB 6862 
WOL 5775 
Broadcast 
RBP71 9237 
RVC47 8059 

? 


WQL 13423 
? 

Broadcast Rpt of 12193 
? 


Broadcast Rptd on 10582 


Broadcast 
? 


VNB 10482 


Broadcast 
? 


last heard 


19 April 
19 April 
April 
21 March 
23 April 
April 
2 May 
3 May 
April 
April 


One of our other monitors writes that the Moscow brotherhood station 

has been active all day long on 9 June on 13530 kHz in 50 bd, sending 
the following very strange 5 FG message over and over again (note the 
repetitions !) 


11177 
12341 
32670 
30986 
98721 
86723 
87269 
76591 
29458 
69867 
65467 
12936 
86743 
86741 
87543 
69876 


12311 
23448 
27364 
40932 
75654 
87629 
76329 
87364 
63298 
87432 
68768 
98432 
86743 
86743 
98798 
87698 


23121 
69876 
92836 
70987 
55656 
37677 
74698 
87265 
75698 
74328 
68763 
32432 
86743 
86743 
98754 
69876 


07342 
87698 
09428 
32123 
12737 
32612 
76857 
96710 
27465 
78674 
34234 
86743 
39867 
86743 
98754 
87698 


01909 

69876 88295 
61208 74982 
49817 26346 
72727 72727 
53498 71296 
98670 27601 
27630 12673 
87326 49876 
29867 32867 
34238 68768 
43286 43286 
32867 86743 
86743 86743 
98754 98754 
69876 87612 


38743 20980 92809 02976 
36498 32764 81276 01276 
81287 65491 87364 81267 
91918 63473 67867 76732 
28756 18276 98716 87326 
56701 57601 73648 15728 
84769 28743 98127 59876 
28376 81273 98615 62875 
67867 86786 43286 43286 
62342 48273 48768 23487 
43286 43286 43286 43286 
43286 43286 43243 86743 
86743 86743 86743 43543 
29867 67543 67986 86754 
12341 34867 86798 63298 


69867 43298 65656 56756 56123 32143 14321 32143 14321 32143 
14321 32787 58765 76587 58765 76587 58765 76587 58756 76587 
76654 75456 36543 54365 36543 54365 36543 54365 36543 54356 
36543 54365 35643 54356 36543 64356 35643 54356 36543 33333 


-0-0-0-0-0-0-0-0-0-0- 
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permission of the editor (ary@luna.nl). Any breach of this may result in 
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